High severity8.5NVD Advisory· Published Apr 10, 2026· Updated Apr 21, 2026
CVE-2026-5483
CVE-2026-5483
Description
A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the odh-dashboard component of Red Hat OpenShift AI (RHOAI) allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to Kubernetes resources.
Affected products
3cpe:2.3:a:redhat:openshift_ai:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:redhat:openshift_ai:*:*:*:*:*:*:*:*range: >=2.16,<2.16.4
- cpe:2.3:a:redhat:openshift_ai:3.2:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:openshift_ai:3.3:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- access.redhat.com/errata/RHSA-2026:7397nvdVendor Advisory
- access.redhat.com/errata/RHSA-2026:7398nvdVendor Advisory
- access.redhat.com/errata/RHSA-2026:7403nvdVendor Advisory
- access.redhat.com/errata/RHSA-2026:7404nvdVendor Advisory
- access.redhat.com/security/cve/CVE-2026-5483nvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor Advisory
News mentions
0No linked articles in our index yet.